Home › WAY › Privacy Policy

Privacy Policy

Last updated: September 27, 2026

Overview

WAY ("we", "our", or "the app") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and safeguard your information when you use our mobile application. WAY is designed with a privacy-first philosophy: no ads, no third-party analytics, no data sales — ever.

Information We Collect

Display Name & Share Code

  • When you first open WAY you choose a display name. A random 8-character share code is generated for you.
  • Your display name and share code are published to Apple's CloudKit public database so that friends can look you up. No email, phone number, or Apple ID is shared.

Location Data

  • WAY uses your device location to show your position on the map and to share it with friends you have approved.
  • Location data is only published to someone in your friend list, and never while Ghost Mode is on or sharing is switched off for that friend. Within those limits it is published when: you add the friend (once, so they know you've added them); the friend pings you and Auto-approve is on for them (the default for every new friend) or Festival Mode is active; you approve a ping by hand; or you save a pin note (only to friends with Auto-approve on). People who aren't in your friend list never receive your location.
  • Each share is a single location fix. WAY does not stream your location continuously.
  • Published location records are stored temporarily in Apple's CloudKit with a short time-to-live (default 10 minutes). They are deleted automatically or immediately when you enable Ghost Mode or revoke sharing.
  • We do not have a server that stores your location history. All location data flows through Apple's CloudKit infrastructure under your iCloud account.

Camera

  • The camera is used solely to scan QR codes when adding friends. No images are stored or transmitted.

How We Use Your Information

  • Display Name & Share Code: Used to let friends identify and add you.
  • Location Data: Used to show your position to approved friends on the map.
  • Camera: Used to scan friend QR codes for quick adding.

Data Storage

  • Friend lists (including each friend's most recent shared location and pin note), privacy settings, and profile data are stored on your device using Core Data and synced to the private CloudKit database in your own iCloud account. We cannot access that database.
  • Friend trails (the breadcrumb lines on the map) are stored only on your device.
  • Your display name, share code, and temporary location records are stored in Apple's CloudKit public database.
  • We do not operate our own servers that store your personal data.

Third-Party Services

Apple CloudKit

  • WAY uses Apple's CloudKit for friend discovery and location sharing (public database), and to keep your friend list and settings in your own iCloud (private database). You need to be signed in to iCloud to use WAY.
  • Apple's privacy policy: https://www.apple.com/privacy/

Apple StoreKit

  • WAY offers an optional one-time "WAY+" purchase (unlimited crew and 24-hour Festival Mode sessions) and an optional one-time tip.
  • Purchases are processed entirely by Apple. We never see or receive your payment details.
  • WAY receives only a verified entitlement from Apple's StoreKit indicating that a valid purchase exists. That entitlement is cached on your device so the unlock resolves instantly at launch, including offline.
  • Because WAY+ is a one-time purchase, there is no auto-renewal and nothing to cancel. Refunds are handled by Apple at reportaproblem.apple.com.
  • Declining to purchase never reduces your safety features or removes friends you have already added.

No Ads, No Analytics

  • WAY does not include any advertising SDKs.
  • WAY does not include any third-party analytics or tracking frameworks.

Your Rights & Controls

You have the right to:

  • Ghost Mode: Instantly stop all location sharing with a single toggle. All published location records are deleted immediately.
  • Per-friend controls: Enable or disable sharing for each friend individually.
  • Block: Block any share code so they can never contact you again.
  • Rotate share code: Generate a new share code, revoking all outstanding records and making your old code permanently unusable.
  • Delete your data: Remove your friends, profile, and CloudKit directory entry at any time.

Data Deletion

To delete all your data:

  1. Enable Ghost Mode to revoke all outstanding location records.
  2. Use "Rotate Share Code" in Privacy settings to delete your public directory entry.
  3. Delete the app — the data on your device is removed with it. Your friend list and settings are also kept in your own iCloud; delete them from your iCloud storage settings.

Data Controller & Legal Rights (EU/UK/California)

The data controller for the limited data WAY handles is muddermis, contactable at muddermister@gmail.com. Our lawful basis for processing is your consent (when you choose to add friends and share your location) and our legitimate interest in operating the app.

If you are in the European Economic Area, United Kingdom, Switzerland, California, or another region with comparable laws, you may have the right to:

  • Access the personal data we hold about you
  • Request correction of inaccurate data
  • Request deletion of your data ("right to be forgotten")
  • Object to or restrict processing
  • Data portability where applicable
  • Withdraw any consent you have given
  • Lodge a complaint with your local data protection authority (for EU residents, the Danish Data Protection Agency — Datatilsynet — at datatilsynet.dk)

Because WAY relies on Apple's CloudKit and keeps your friend list on your device and in your own iCloud, you can exercise most of these rights directly by enabling Ghost Mode, rotating your share code, and deleting the app. For any other request, email us at muddermister@gmail.com.

Children's Privacy

WAY is not directed to children under 13 (or under 16 where local law requires, such as under GDPR in parts of the EU) without verified parental consent. We do not knowingly collect personal information from children covered by these age limits.

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last Updated" date.

Contact Us

If you have questions about this Privacy Policy, please contact us at: muddermister@gmail.com